synced_folders/nfs: lock around sudo input [GH-2680]